Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier: qru5xnXfLoGgjbLLS56naSTfsjY0Z5mU5xps2FKwHNI=
Subject key identifier: E3:45:36:11:FC:B4:BD:EC:52:CB:74:D1:9F:33:50:E1:BB:5D:50:91
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 0195E04701B5329A4426C540FF4EEA6146EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number: 1398
Signing time: Sat 29 Mar 2025 05:01:44 +0000
Manifest this update: Sat 29 Mar 2025 05:01:44 +0000
Manifest next update: Sun 30 Mar 2025 05:01:44 +0000
Files and hashes: 1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: y22jUSUB54O+26SxcG1E1NXpyXcEF8NIhywIK7j8Lgk=)
2: kvZo-BdFpFiAumpYOAN_8hogK54.roa (hash: B0ogmfmwZkernYmKh+SkwXZzEeGWetiV/fs+CFuZhi0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:47:01:b5:32:9a:44:26:c5:40:ff:4e:ea:61:46:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Mar 29 05:01:44 2025 GMT
Not After : Mar 30 05:01:44 2025 GMT
Subject: CN=e3453611fcb4bdec52cb74d19f3350e1bb5d5091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:13:1a:ae:fa:f3:10:cc:df:3d:d1:72:0c:
14:93:13:8d:e1:f2:2d:fd:15:31:03:4f:0d:67:c2:
79:83:d4:98:19:29:8b:89:ca:d0:2b:b5:5c:43:04:
4a:09:73:cc:b4:04:e5:79:a4:b7:1a:c3:4c:e4:99:
bf:b4:65:b2:6c:02:f7:23:4d:b6:82:29:43:79:d9:
2d:cb:c1:01:c7:eb:7d:f0:d0:db:3c:ad:83:24:cd:
d6:e7:45:10:15:36:da:59:cd:82:1a:4d:b3:b5:c8:
17:c2:9b:29:3b:06:69:9a:74:bc:b4:58:6f:df:f8:
00:2e:4c:cd:0b:0e:61:f0:7d:ce:e0:07:4f:77:e4:
5a:ef:58:8e:4a:cf:11:f7:75:e4:47:40:6e:cd:67:
ea:10:8b:56:f5:76:1c:76:ec:7a:77:49:57:db:e5:
60:0a:42:14:38:7c:98:4d:0a:d7:be:45:62:18:7b:
e2:44:73:de:8a:2f:18:18:b6:99:a0:9c:fd:95:27:
01:c4:1d:c3:99:61:bb:03:3d:d8:e8:d2:ec:0a:fc:
5a:8b:09:31:55:b7:25:e8:af:e3:3f:48:f2:f0:85:
76:5f:44:57:f4:91:2a:e8:84:06:47:1c:38:7a:1b:
e4:43:94:98:8d:65:33:9a:a6:c7:41:cd:60:5c:0c:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:36:11:FC:B4:BD:EC:52:CB:74:D1:9F:33:50:E1:BB:5D:50:91
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:61:d7:c0:1e:c3:63:5c:32:89:6d:c0:54:65:e2:e8:e4:83:
3f:30:d9:99:f7:40:3e:be:ff:8b:1a:7a:93:7a:e2:06:9c:72:
59:4f:05:d0:3d:b9:c4:c8:47:df:62:07:b3:9e:5d:06:fe:78:
a4:67:85:b5:ed:ea:a9:c2:c0:f9:d2:88:0e:2b:fe:64:0e:64:
a5:d5:59:0b:19:5f:66:a7:98:41:58:32:39:41:d9:0e:a2:e9:
04:45:75:79:8f:9e:ef:dc:bd:e1:09:55:57:25:39:77:c8:fa:
0d:24:5f:06:a1:8a:1b:ce:9d:cd:a7:4f:36:c5:08:bc:a9:23:
c6:35:b2:2c:9a:aa:42:77:3f:fb:3a:09:d2:04:18:ea:4a:37:
93:5f:93:37:03:cf:8a:05:72:00:d4:01:dc:4c:2e:c2:96:dc:
d0:c1:7a:c9:70:8f:05:cc:52:0d:4b:6e:0a:e0:00:32:dc:cc:
2f:bc:cd:a3:4f:7a:f0:fc:07:89:01:b6:8a:99:45:4b:98:ca:
67:25:f2:84:df:bb:bd:39:7a:c7:5e:43:11:ec:6a:3f:46:2a:
ab:20:29:47:46:76:a7:3c:26:ea:af:8e:50:4f:2e:0e:89:69:
4e:c1:0c:90:36:bf:fe:1f:8a:e7:e0:b1:38:ff:b3:1c:25:fd:
fa:3b:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:42 2025 by rpki-client